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Abstract — A multiple-access channel is considered in which 
messages from one encoder are confidential. Confidential mes- 
sages are to be transmitted with perfect secrecy, as measured 
by equivocation at the other encoder. The upper bounds and the 
achievable rates for this communication situation are determined. 



I. Introduction 

We consider a two-user discrete multiple-access channel in 
which one user wishes to communicate confidential messages 
to a common receiver while the other user is permitted to 
eavesdrop. We refer to this channel as the multiple access 
channel with confidential messages (MACC) and denote it 
(Ai x A?2,p(y, yx\xi, X2), y x yi). The communications sys- 
tem is shown in Figure [T] The ignorance of the other user is 
measured by equivocation. This approach was introduced by 
Wyner [1] for the wiretap channel, a scenario in which a single 
source-destination communication is eavesdropped. Under the 
assumption that the channel to the wire-tapper is a degraded 
version of that to the receiver, Wyner determined the capacity- 
secrecy tradeoff. This result was generalized by Csiszar and 
Korner who determined the capacity region of the broadcast 
channel with confidential messages [2]. The Gaussian wire-tap 
channel was considered in [3]. 

In this paper, we determine the bounds on the capacity re- 
gion of the MACC, under the requirement that the eavesdrop- 
ping user is kept in total ignorance. The results characterize 
the rate penalty when compared to the conventional MAC [4], 
[5] due to the requirement that one message is kept secret. 

It is apparent from the results that eavesdropping by user 
1 will hurt the achievable rate of user 2. As illustrated in the 
last section by an example in which the half-duplex constraint 
is imposed, the eavesdropper should give up on listening all 
together, thus maximizing rates of both users. The moral of 
the example is that either user 1 will make both himself and 
the other user miserable by eavesdropping more and thus 
reducing both its own and other user's ability to transmit; or, 
it will make both of them happy if it decides not to listen. 
We note that, although user 2 cannot know exact times when 
user 1 is eavesdropping, it is enough for user 2 to know the 
eavesdropping probability (or equivalently, the fraction of time 
user 1 is listening), to adjust its code rate accordingly. This 
information can be considered public, since it is known to the 
common receiver. 
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II. Channel model and statement of result 

A discrete memoryless MAC with confidential messages 
consists of finite sets X\, X%, y, y\ and a conditional proba- 
bility distribution p(y, yx\xi, 2:2). Symbols (x%, X2) G X\ XX2 
are channel inputs and {y,yi) G y x y± are channel outputs 
at the receiver and encoder 1, respectively. The channel 
p(y\xi, X2) is a MAC channel, and the channel p(y, yx\xi, X2) 
is a wire-tap channel. Each encoder t, t = 1,2, wishes to send 
an independent message Wt G {1, ...,M t } to a common 
receiver in n channel uses. The channel is memoryless and 
time-invariant in the sense that 



/ 1 i i i—l i — 1 

P(yi,i I y2,<|x 1 ,x 2 ,y 1 ,y 2 



) = p(yi,i,y2,i\xi,i,x 2 ,i) (l) 



where x\ — [x t l , . . . , x t ,i] . To simplify notation, we drop 
the superscript when i = n. A deterministic encoder g for user 
1 is a mapping g : W\ — > X™ generating codewords 



xi 



(2) 



A stochastic encoder / for user 2 is specified by a matrix 
of conditional probabilities /(X2IW2), where X2 6 X$, W2 G 
W2, is the private message set, and 



]T/(x 2 M = i. 



Note that f(x2\w 2 ) is the probability that the message W2 is 
encoded as channel input x 2 . 

The decoding function is given by a mapping <fi : y n — » 
IV, x 1VV 

The implicit assumption in our model is that user 1 observes 
the sequence Yi in block fashion. This prevents user 1 from 
using symbols Y\ for encoding its own messages, as reflected 
in the encoding function (0. This restriction of our model is 



made for the sole purpose of making the problem easier to 
solve and understand. 

An (M x ,M 2 ,n,P e ) code for the channel consists of two 
encoding functions /, g, decoding function cf) sucn that the 
average probability of error of the code is 

Pe = H J^-JfPiHy) ^ (wi,w 2 )\(w 1 ,w 2 ) sent} (3) 

(w 1 ,w 2 ) 

The level of ignorance of user 1 with respect to the confi- 
dential message is measured by the normalized equivocation 
(l/n)£r(W 2 |Xi,Yi). 

A rate pair (R X ,R 2 ) is achievable for the MACC if, for any 
e > 0, there exists a (M x , M 2 , n, P e ) code such that 



nRt t = 1,2, P e < e 



M t > 2 
R 2 - -H(W 2 \X 1 ,Y 1 ) < e. 



(4) 
(5) 



The capacity region of the MACC is the closure of the set 
of all achievable rate pairs (R X ,R 2 ). 

The next two theorems show the outer bound and the 
achievable rates and are the main results of this paper. 

Let Cjj be a closure of the union of all (R\, R 2 ) satisfying 

R x < I(X X ;Y\X 2 ) 

R 2 < I(V;Y\U,X X ) - I(V;Y X \U,X X ) 
R 1 +R 2 <I(X 1 ,V;Y)-I(V;Y 1 \U,X 1 ) (6) 

for some joint distribution 

p(u,v,x 1 ,x 2 ,y,y 1 ) 

= p(u)p(v\u)p(x x \u)p(x 2 \v)p(y,y x \x 1 ,x 2 ) (7) 

where U and V are auxiliary random variables satisfying U — » 
V^(X 1 ,X 2 )^(Y,Y 1 ). 

Theorem 1: (Outer Bound) For any achievable rate pair 
(Ri,R 2 ) in MACC it holds that (Ri,R 2 ) G C v . 

Theorem 2: (Achiev ability) The rates in the closure of the 
union of all (R X ,R 2 ) satisfying 

Ri <I(X X ;Y\U,V) 
R 2 <I(V;Y\U,X 1 )~I(V;Y X \U,X X ) 
R x + R 2 < I(X X ,V;Y\U) - I(V;Y X \U,X X ) (8) 

for a joint distribution p(u, v, x x ,x 2 ,y, y\) that factors as (0. 

III. Outer Bound 

Proof: (Theorem^ 
We next show that any achievable rate pair satisfies 

Ri<I(X i; Y\X 2 ,Q) (9) 
R2 <I(V;Y\U,X X ,Q)-I(V;Y X \U,X X ,Q) (10) 
R x + R 2 < I(U,X X ,V;Y\Q) - I(V;Y X \U,X X ,Q) (11) 

for some product distribution U — > V — > (X x , X 2 ) — > (Y, Y x ) 
that factor as (O and an independent timesharing random 
variable Q. Then, the approach of [6, Thm. 14.3.3] and the 
observation that Markovity U ^ V ^ (X x , X 2 ) — » Y implies 
U —> (V, X x ) — * Y, will prove the claim. 



Consider a code (M X ,M 2 , n, P e ) for the MACC. Applying 
Fano's inequality results in 

H(W X , W 2 \Y) < P e log(MiM 2 - 1) + h(P e ) 4 n5 n (12) 

where 5 n — > as P e — > 0. It follows that 

ff(Wi,W 2 |Y) =if(W!|Y)+lf(W 2 |Y,Wi) <n^„ (13) 

We first consider the bound on R x . 

nR x = H(W X ) 

= I(W X ;Y)+H(W X \Y) 
<W I(W x ;Y)+nd n 
< (b) I(X x (W x );Y)+n5 n 
<( c )/(X i; Y|X 2 )+n^ 

n n 

a^Y / H(Y l \X 2 ,Y t - 1 )-Y / H(Y\Y l -\X x ,X 2 ) 

i=l i=l 

+ nS n 

n n 

<(e) ^ ff^lJfai) - H(Y i \X Xi ,X 2i ) + nS n 

n 

= ^I(X Xti ;Y i \X 2 , i )+n5 n (14) 

i=l 

where (a) follows from from Fano's inequality ( fT3l : (b) from 
(ffji; (c) from the independence of Xi, X 2 ; (d) from the chain 
rule; (e) from the fact that the conditioning decreases entropy 
and from the memoryless property of the channel (Q}. 

Following the approach in [6, Sec. 14.3.4], we introduce 
a uniformly distributed random variable Q,Q G {1, . . . , n}. 
Equation ( fT4l becomes 

n 

nR x <Y / I ( x ^ Y i\ x 2,i)+nS n 

n 

= Y / I (Xi, l - 1 Y l \X 2 , l ,Q = i) + n5 n (15) 

= nI(X ltQ ;Y Q \X 2 . Q ,Q) + nS n 
= nI(X x ;Y\X 2 ,Q)+nS n 

where X\ — X x ,q, X 2 = X 2 _q, Y = Yq. Distributions of new 
variables depend on Q in the same way as the distributions of 
X x>i , X 2:i , Yi depend on i. 

Next, we derive the bound on R 2 . Note that the perfect 
security <(5j implies 

nR 2 -ne<H(W 2 \X x ,Y x ). (16) 

Hence, we consider the bound on i?(W2|Xi, Yi). 

#(W2|Xi,Yi) 

= H(W 2 \X X )-I(W 2 ;Y X \X X ) 

= I(W 2 ;Y\X X ) + H(W 2 \Y,X X ) - I(W 2 ; Y X \X X ) 

< I(W 2 ; Y\X X ) - I(W 2 ; Y X \X X ) +nS n (17) 



where the inequality follows from Fano's inequality ( fT3| ). 
We next use a similar approach as in [2, Sect.V] to bound 
equivocation 77(W 2 |Xi, Yi) in (flTt , 

We denote Y^ +1 = [Yi^+i, . . . , Yi n ] and use the chain rule 
to obtain 

/(W 2 ;Y|Xi) 

= ^7(W 2 ;Y i |Y i - 1 ! X 1 ) 

i=l 
n 

= $^J(W 2) ;Y l |Yi+ 1 ,Y' 1 - 1 ,X 1 ) + Sj - E 2 (18) 

i=l 

7(W 2 ;Y 1 |X 1 ) 

n 

= Y,I(W2;Y ll \Y\+\X 1 ) 

1=1 

n 

= £ 7(W 2 , ; Y 1 . l \Y\ +1 ,Y l - 1 ,X 1 ) + E x - E 2 (19) 



i=l 



where 



E 1 = ^7(Yi+ 1 ;Y- i |Y i - 1 ,X 1 ) 

n 

E 2 =^/(Yi+ 1 ;y i |Y l -\X 1 ,^ 2 ) 

i=l 
n 

E 1 = ^7(Y i - 1 ;Y l!i |Yi+ 1 ,X 1 ) 

n 

t 2 =J2 7(Y*' _1 ; Yi^lY^ 1 , X 1} W 2 ). 

8=1 

Lemma 1: Ei = Ei and E 2 = £ 2 . 
Proof: Proof follows the approach in [2, Lemma 7]. ■ 
We let 

*7< = (Y^Y^X*" 1 ^ 1 ) (20) 



V5 = (W*,Ui) 
in ( TT8b and ( fT9l and obtain respectively 



(21) 



I(W 2 ; Y|X X ) = ^ /(VJ; yi|E/i,X M ) + E x - E 2 (22) 

i=l 
n 

7(W 2 ; YxlXi) = j^Hyi; Y hi \U h X hi ) + E x - E 2 (23) 

i=l 

We follow the same approach as in $15[ to obtain 

-^/(VSj^I^.JClO - -V 7(^;Y i |t/ < ,X M ,Q = i) 



1=1 4=1 



= 7(Vq;Y q |C/q,X 1 , q ,Q) 

= 7(V;Y|t/,X 1 ,Q) (24) 

where V = Vq, Y = Yq, X\ = X hQ} U = U Q . Similarly, 

1 " 

-J2l(V i ;Y 1 j\U i ,X 1 , i )=I(V;Y 1 \U,X 1 ,Q) (25) 



where Yi = Yi,q. From the memoryless property of the 
channel ®, it follows that V -> (Xi,X 2 ) -> (Y, Yi). 
Using (l24l in ( 1221 . we obtain 

7(W 2 ;Y|X 1 )=n7(F;Y|E/,X 1 ,Q) + E 1 -E 2 . (26) 

Similarly, using d25l in ( [231 

7(W 2 ; Yi|X x ) = nI(V; Yi|*7,Xi,Q) + Ei - £ 2 . (27) 

Substituting d26l and d27l in ( TTTb results in 

-Tf^lX^Yx) 
n 

< 7(V; Y|£7, Xi, Q) - I(V; Y^U, X 1 ,Q) + 5 n . (28) 

Using ( [TBI in (l28l l. we obtain the desired the bound ( fTOb on 
rate i? 2 . 

We next prove the bound on the sum rate ( TTTb . 

+ i? 2 ) = /(Wi, W 2 ; Y) + H(W U W 2 \Y) 
<7(X 1) W 2 ;Y)+n<5„ 
<7(X 1) W 2 ;Y)-[77(W 2 ) 

-77(W 2 |X 1 ,Y 1 )-ne]+n<5„ 
= 7(X 1 ;Y)+7(W 2 ;Y|X 1 ) 

-7(W 2 ;Y 1 |X 1 ) + n(J„ + e) 

where the second inequality follows from the perfect secrecy 
©. Using (1221 . (1231 and Lemma [T] we have 

7(W 2 ;Y|Xi)-7(W 2 ;Yi|Xi) 

n 

= [W; Yi\Ui, X M ) - 7(W 2 ; Y^lUi, X M )] (30) 



Hence, d29l can be rewritten as 

n(i? x +7i 2 ) 

n 

< [7(Xi; Y.IY 2 - 1 ) + I(W2',Yi\Ui, X M ) 

8=1 

-7(W 2 ;Yi, i |U i) X 1 , i )] + n(<5„ + e) 

77 

<^[7(X l! Y i - 1 ! Yi+ 1 ;Yi) + 7(W 2 ;Y i |[/ i ,X 1)i ) 

8=1 

-7(W 2 ;Y M |C/ i ,X M )] +n{5 n + e) 

n 

= [l{Vi,X hi ; Yi) - I{Vi;Y 14 \Ui, X M )] + n(6 n + e) 



8=1 



< J2 [J(Yi, Ut, X M ; Yi) - I(Va Yi ti \U u X M )] + n(S n + e) 



8=1 



where Ui and Vj are defined in ( f20b and d2"Tl >. Using the same 
time-sharing variable approach as before we obtain the sum 
rate bound (TTTb . Moreover, the Markovity X\^ — Ui — Vi can 
easily be verified. ■ 



IV. ACHIEVABILITY 

Proof: (Theorem^ 
Fix p(u), p(xi\u), p(v\u) and p(x2\v). Let 

R 3 = R 2 + I(V;Y 1 \X 1 ,U). 



(31) 



Codebook generation: Generate a random typical sequence 
u, with probability p(u) = Yl7=iP( u i)- We assume that both 
transmitters and the common receiver know the sequence u. 

Generate Mi = 2 nRl sequences xi, each with probabil- 
ity p(xi|u) = YTi=iP( x i,i\ u i)- Label them Xi(u>i), w\ G 
{l,...,Mi}. 

Generate M 3 = 2 nR3 sequences v with probability 
p(v|u) = Yl" =1 p(vi\ui). Label them v(w 2 ,l), w 2 G 

{i,...,2" fl2 }, i e {i,...,2 nI< y^\ x ^ u )}. 

Encoding: To send message wi G Wi, user 1 sends 
codeword xi(iui). To send message w 2 £ W2, user 2 uses 
stochastic encoder /, and encoder 2 uniformly randomly 
chooses an codeword v(w 2 ,l). That is, the encoder chooses 
randomly a codeword v(w 2 , 1) from a bin iu 2 . Finally, user 2 
generates the channel input sequences x 2 according to p{x 2 \v). 

Decoding: Let denote the set of typical (u, xi,v, y) 
sequences. Decoder chooses the pair (wi,w 2 ) such that 
(u,x.i(wi),v(w 2 ,l),y) G Ac if such a pair (wi,w 2 ) exists 
and is unique; otherwise, an error is declared. 

Probability of error: Define the events 

E Wl , W2 = {(u,xi(«;i),v(u* J 0,y) 6 A^}. (32) 

Without loss of generality, we can assume that (wi,w 2 ) = 
(1,1) was sent. From the union bound, the error probability 
is given by 

Pe<P{£ 1 C , 1 |(M)}+ £ P{E Wlt l\(l, 1)} 

+ E E^-^K 1 ' 1 )} 

+ E E E^^.^K 1 ' 1 )} (33) 

From the AEP and [6, Thm. 14.2.1, 14.2.3], it follows that 

P{m,i\Q-,l)}<8 (34) 

P{E Wul \(l,l)}<2- n ^ x ^ v ' u ^ (35) 

P{E 1<W2 \(1,1)} < 2 - n V ( y-> Y \ x ^ u )- s \ (36) 

P{^ liWJ2 |(l,l)}<2-^^l^)^] (37) 

where 5 — > as n — > 00. Hence, (|33l is bounded by 

P < <5 + 2™- Rl 2 _rl(/(Xi;y|v '' C/)_(5:i + 2™- R3 2~" (7(V;y|Xl ' t/) ~' 5) 
+ 2 ™(fl.i+fl3) 2 -™(^(^i^^|c / )-'5) (38) 

implying that we must choose 



Ri<I(X i; Y\V,U) 
Ra < I(y-,Y\X lt U) 
Ri + R 3 <I{X X ,V;Y\U) 



(39) 
(40) 
(41) 



to guarantee P e — > as n gets large. 

Equivocation: We consider the normalized equivocation. 

JT(W 3 |Yi,Xi) 

>H(W 2 |Yi,Xi,U) 

= H(W 2 , Yi |X a , U) - ff(Yi |X X , U) 

= Zr(W 2 ,Yi,V|Xi,U)-fl-(V|W2,Yi,Xi,U) 

-/rCYiiXx.u) 

= If (W 2 , V|Xi, U) + H(Yx \W 2 , V, Xi, U) 
-fr(V|W 2 ,Yi,Xi,U)-H(Yi|Xi,U) 

> ff(V|Xi,U)+fl"Ofi|V,Xi,U) 

-JJ(V|W 2 ,Yi,X 1 ,U)-.ffCYi|Xi,U) 

= H(V|Xi, U) - ff(V|W 2 , Y 1( Xi, U) 

-/(V;Yi[Xi,U) (42) 



The first term in (|42] > is given by 

H(V\X 1 ,V) = H(V\V) = nR 3 



(43) 



where the first equality follows from the Markov chain V — 
U — Xi, and the second equality because given U = u, V 
has 2 nRs possible values with equal probability. 

We next show that £Z"(V|W 2 , Yi,Xi,U) < nSi, where 
Si — > as n — ■> 00. Let W 2 — w 2 . User 2 then sends a 
codeword v(w 2 , 1). Let X W2 denote the average probability of 
error that user 1 does not decode v(w 2 , 1) correctly given the 
information W 2 — w 2 . Following the joint typical decoding 
approach, we have X W2 — > as n — > 00. Therefore, Fano's 
inequality implies that 

H(V\W 2 = iW2,Yi,Xi,U) < l + \ W2 (nR 3 -nR 2 )±nSi. 
Hence 

H(V\W 2 ,Yi,Xi,U) = 

£ P {W 2 = w 2 )H(V\W 2 = w 2 , Yi,Xi,U) < nJi. 



UJ26W2 



(44) 



Finally, the third term in (l42l can be bounded by 

I(V;Yi\Xi,XJ) <nI(V;Yi\Xi,U) +nS 2 (45) 

where S 2 — » as n — > 00. The proof follows the proof in [1, 
Lemma 8]. 

Therefore, by using OTb . (l43l . (l44l . and d431 l, we can rewrite 
(1421 as 

(W 2 |Xi, Yi) > ni? 3 - nI(V; Y X \X U U) - n(S 1 + S 2 ) 

= nR 2 - ne (46) 

where e = S% + 5 2 . ■ 



V. Discussion and Implications 

To show the impact of secret communication on the achiev- 
able rates in MACC, we present two examples: the half-duplex 
MACC and the Gaussian MACC. To simplify calculations, we 
consider the following corollary which gives a weaker inner 
bound used in the rest of the paper. 

Corollary 1: The rates in the closure of the convex hull of 
all (R\,R,2) satisfying 

Ri </(X i; Y|X 2 ) (47) 
R 2 <I(X 2 ;Y\X 1 )-I(X 2 ;Y 1 \X 1 ) (48) 
R 1 +R 2 <I(X 1 ,X 2 ;Y)-I(X 2 ;Y 1 \X 1 ) (49) 

for fixed product distribution p(xi)p(x 2 ) on X\ x X 2 is 
achievable in MACC. 

Proof: Corollary follows by choosing V = X 2 and U 
independent from X\ and X 2 in Theorem |2] ■ 
Binary inputs are to be communicated from the both users 
under a half-duplex model in which user 1 cannot listen and 
transmit at the same time. Therefore X 2 G {0, 1} and X\ 6 
{0, 0, 1}. Null symbol models the listening period of user 
1. When X\ = 0, user 1 observes the output Y\ = Y; when 
user 1 transmits, X\ E {0, 1}, the output Yj is the null symbol, 
no matter what user 2 sends. When both users transmit, the 
MAC channel to the destination is given by the mod 2 sum 
Y = X\ © X 2 . Otherwise, Y — X 2 . In summary, 



Y 



X X 

Y 



X 2 , 
X 2 , 



Yi 
Yi 



Y. 



if X-, ^ (50) 
i£X x =0 (51) 



Denote P = P[X\ = 1] and D = P[X\ = 0]. Rates (@7>-(|49) 
for this channel can be shown to be 



Ri < h(P) 
R 2 < H(X 2 )(l - D) 
R 1 +R 2 <H(Y)-H(X 2 )D. 



(52) 
(53) 
(54) 



If we assume the inputs at user 2 are equally likely, then 
H(Y) = 1. The rates (|52>-<|54> become 



Ri < h{P) 
R 2 < 1 - D 
Ri+R 2 <l-D 



(55) 
(56) 
(57) 



and the secrecy constraint ( I56l l becomes irrelevant. The achiev- 
able rates are determined by the amount of time user 1 listens: 
the more user 1 listens, the more user 2 must equivocate rather 
than communicate. The best strategy is then for user 1 to 
transmit all the time (D = 0), thus achieving the full capacity 
region of the conventional MAC. 

In the other limiting case in which user 1 only listens (D — 
1), user 2 cannot send information because user 1 hears it 
(Yi = X 2 ). In fact, the channel reduces to the special case of 
the channel considered in [2] and the conclusion is agreeable 
with that of [2]. In the example, the fact that R 2 = is due to 
the very special channel Y\ = Y. In the more general case in 
which Y\ is a noiser observation of X 2 than Y, user 2 can still 



"squeeze" some information through even if user 1 listens all 
the time. Nonetheless, this example illustrates the fundamental 
behavior in the MACC, that can be observed from Corollary Q] 
Eq. (l48l : the more user 1 decides to listen, the more user 2 
has to equivocate and his achievable rate is lower. 
We next consider the Gaussian channel 



Y=X 1 
Y x =X 2 



X 2 
■Zi 



(58) 
(59) 



where Z and Z\ are independent zero-mean Gaussian random 
variables with variance N and Ni, respectively. The code 
definition is the same as given in Section [II] with the addition 
of the power constraints 



<p t , 



t = 1,2. 



(60) 



i=l 



Corollary 2: The rates in the closure of the convex hull of 
all (Ri,R 2 ) satisfying 



Pi 



Ri + R 2 <C 



(61) 
(62) 
(63) 



Corollary follows from Theorem [2] by independently choosing 
X t ~M\0,P t ] fort =1,2. 

Future Work 

It is conceivable that the outer bounds given in Theorem Q] 
can be strengthened to coincide with the lower bounds of 
Theorem [2] Investigating this possibility and determining the 
MACC capacity are the subjects of our future work. Moreover, 
the formulation of this problem in which the objective is 
to maximize rates under the secrecy constraint follows the 
definition of Wyner [1]. However, different objectives can be 
envisioned, in which user 1 is more interested in eavesdrop- 
ing than in maximizing its rate. It would be interesting to 
compare the conclusions that follow from the two problem 
formulations. 
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